Privacy Policy

This Privacy Policy explains how OZO Gem Studio (“OZO,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you visit ozo-gemstudio.com, design a bracelet in our Studio, place an order, send a gift, write a review, or otherwise use our services (the “Services”).

By using the Services, you agree to the practices described in this Policy, which is written to be consistent with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations.

Information you give us directly: contact details (name, email, phone where provided), delivery details (shipping address, barangay, city, province, postal code), order details (wrist size, chosen gemstones, cart items), personalization content (any photo or message you add to a Gift a Design, and any “meaning reading” narrative you choose to generate), event details you share when requesting a booking or submitting a design as a guest, inquiry details from our Contact form, review details (the order code and email you use to confirm your purchase, your star rating, your review, and any photo you add — see Section 6), and any optional description you type in “Let us suggest a design.”

Our payment processor, PayMongo, tells us your payment status and method (e.g., GCash, or a card's last four digits) — we never receive or store your full card number, CVV, or online banking credentials.

Information collected automatically: basic usage information about how the Studio is used (for example, which gemstones are viewed or placed most often), used in aggregate to improve the product, and standard technical data our hosting provider processes to deliver the site securely, such as IP address and browser type.

What we don't collect: we don't require a password-protected account to shop, and we never ask for government ID numbers or your full card or bank details.

To take and fulfill your order — ready-made, custom, Gift a Design, or event.

To generate and deliver a Gift a Design's one-time redemption code and e-gift card.

To keep you, and where applicable your gift recipient, updated on order status and delivery.

To ship your order and coordinate with our courier.

To respond to inquiries and event booking requests.

To confirm that a review comes from a real purchase, check it before it is published, and show it on our website.

To operate and improve the Studio, including the optional AI design-suggestion feature.

To detect and prevent fraud, abuse, or technical issues.

To meet our legal, tax, and bookkeeping obligations.

We do not sell your personal information. We share it only as needed to run OZO Gem Studio, and only for the purpose described: PayMongo, to process payment by card, GCash, Maya, GrabPay, ShopeePay, or QR Ph; Brevo, to send order confirmations and delivery updates; Supabase, our database and storage provider, which securely holds order, design, and review records; Cloudflare, our hosting and content-delivery provider, and where uploaded photos are stored; our AI design-suggestion provider, which only ever receives the optional description you type in “Let us suggest a design,” never your name, email, or address; our delivery courier(s), who receive your name, delivery address, and phone number solely to deliver your order; and government authorities, only if we're required to by law.

Each provider may only use your information to perform the service we've engaged them for.

Reviews you choose to submit are published on our website, where anyone can see them, as described in Section 6.

If you purchase a Gift a Design, the photo and message you upload are shown to your recipient inside the Studio and included on the e-gift card we send you to pass along. If you're a gift recipient or event guest designing a bracelet, the name, wrist size, gemstone choices, and delivery details you submit are used solely to build and ship that piece.

If you write a review, we ask for the order code and the email address you used at checkout so we can confirm that the review comes from a real purchase. We also collect your star rating, your review, whether you chose to post anonymously, and a photo if you add one. The order code and email are used only to check your purchase and are never shown on the website. Our team is emailed a copy of each new review, with your order code and email, so they can check it before it is published.

Your review stays private until our team approves it. Once it is published, anyone can see it: your star rating, your review, the date, a “Verified purchase” label, your photo if you added one, and your name shown as first name and last initial taken from your order (for example “Maria C.”) — or as “OZO customer” if you chose to post anonymously. Published reviews can be read, copied, and found through search engines, and we can't control what others do with them once they are visible.

Photos are resized and re-saved in your browser before they are uploaded, stored with our hosting provider, Cloudflare, and shown only while their review is published. Please don't include other people's faces, addresses, or other personal details in a photo or review.

We keep a review, its photo, and the record linking it to your order until we delete them, which we do if you ask us to or if we decide to remove the review. To have your review or photo removed, contact us using the details at the end of this Policy and quote your order code; we may ask you to confirm the email used for the order. We'll take it off the website as soon as we can, though copies made by others or kept by search engines are outside our control.

If a customer shares feedback with us in another way — for example in a message or in person — we may add it to the Reviews page only with their permission. We label it with where it came from (for example “Shared via Messenger”) and never mark it as a verified purchase.

To protect the review form from spam and fake reviews, we limit how often it can be submitted from one connection and use hidden checks that ordinary visitors never see. The connection details (such as your IP address) used for this are kept only briefly.

We keep order and design records for as long as needed to fulfill your order, handle any delivery issue, and meet our bookkeeping and tax obligations, after which we delete or anonymize it. You may ask us to delete your personal information sooner, subject to Section 8.

Reviews, and any photos with them, are kept as described in Section 6.

As a data subject under Philippine law, you have the right to: be informed of how your data is collected and processed (this Policy); access a copy of the personal information we hold about you; correct any inaccurate or outdated information; object to, or request restriction of, certain processing; request erasure or blocking of your data, where legally permitted; data portability, i.e. receive your data in a portable, commonly-used format; and lodge a complaint with the National Privacy Commission (privacy.gov.ph).

To exercise any of these rights, contact us using the details in Section 14.

The Studio uses your browser's local storage to remember things like your cart and an in-progress design — this stays on your device and is never sold or shared. We don't use third-party advertising cookies or trackers.

Our Services are intended for people who can lawfully make a purchase in the Philippines. We don't knowingly collect personal information from children under 18 without a parent or guardian's involvement — for example, at a family event booth. If you believe a child has provided us personal information without appropriate consent, contact us and we'll delete it.

We apply reasonable technical and organizational safeguards to protect your information: encrypted connections (HTTPS) throughout the Services, access controls limiting who on our team can view order data, and secure, access-controlled storage for uploaded photos. No method of transmission or storage is completely secure, but we work to protect your information appropriately for its sensitivity.

Our service providers (Section 4) may process and store information on servers located outside the Philippines. Where this occurs, we rely on providers that maintain appropriate contractual and security safeguards for your information.

We may update this Privacy Policy from time to time. If we make material changes, we'll update the effective date at the top of this page. Please check back periodically.

Questions, requests, or complaints about how we handle your personal information can go to: